DevSecOps with Prisma Cloud

Apache Log4j 2 is an upgrade to Log4j that provides significant improvements over its predecessor, Log4j 1.x, and provides many of the improvements available in Logback while fixing some inherent p…

My subdomain enumeration script. It's unique in the way it is built upon.

Malware Configuration And Payload Extraction

Open Cyber Threat Intelligence Platform

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

Jekyll Files for cloudsecwiki.com

Multi-Cloud Security Auditing Tool

Automated Security Testing For REST API's

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

Azure Red Team tool for graphing Azure and Azure Active Directory objects

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

InQL - A Burp Extension for GraphQL Security Testing

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

A tool for reverse engineering Android apk files

Impacket is a collection of Python classes for working with network protocols.

✨ Build a beautiful and simple website in literally minutes. Demo at https://beautifuljekyll.com

Trying to tame the three-headed dog.

reNgine is a reconnaissance engine(framework) that does end-to-end reconnaissance with the help of highly configurable scan engines and does information gathering about the target web application. …

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

The fastest and cross-platform subdomain enumerator, do not waste your time.

Top disclosed reports from HackerOne

Fast web fuzzer written in Go

Fast subdomains enumeration tool for penetration testers

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.